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ABSTRACT: 

PROBLEM TO BE SOLVED: To ensure the security of the processing contents and a 
processing flow by using an identifier to identify the documents for every document data 
base. SOLUTION: A client 100, a document management server 101 and a workflow 
management server 102 are connected to a network 103. The documents, i.e., the user data 
and the flow control information, i.e., the system data are separately stored in the data bases of 
different computers. Then, the user data and the system data are separately stored in its own 
in-house data base and a data base of the outsourcing destination respectively. Then, a workflow 
engine refers to the system data and controls only the access right of the user data. Meanwhile, 
the system data are described by means of only an identifier that is insignificant by itself to ensure 
the security of a processing flow. The information on correspondence between the identifier and 
a display name is managed as the user data. 
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